Open Mail Relay

[Ryan Coleman]

On Aug 15, 2010, at 6:57 AM, peter at vfemail.net wrote:

> I've requested copies of the offensive messages, and I'm hopeful the complainer will send me copies.  I believe I have control over the majordomo lists -- postings are restricted to list members, postings are monitored, and many lists are moderated.  
> 
> Assume, as Mr. Bonomi suggests, that some bad guy has installed some type of additional mailer on the machine or another machine that's allowed to relay mail.  How would I go about locating that other mailer?  

In my experiences if they were relaying through your machine you'd still see it on the logs. Look for the time/date of the emails you get from the complainant and see if anything matches up. Then use the IPs to track down who might be doing it.

A little detective work can go a long way.

--
Ryan